@agent-native/core 0.115.4 → 0.117.0

package/dist/realtime-protocol.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Realtime SSE wire protocol — shared by the server SSE handlers (framework
+ * in-process path + the hosted Realtime Gateway) and the client transport.
+ *
+ * Pure constants, types, and parsers only — NO h3/node/browser deps — so both
+ * the Node server and the browser client import it.
+ *
+ * Frame taxonomy:
+ *   - CHANGE / batch frames ride the default (unnamed) SSE `message` event and
+ *     are parsed by the client's existing `normalizeEventPayload`. Unchanged.
+ *   - CONTROL frames (handshake, token rotation) ride NAMED SSE events, so
+ *     `EventSource.addEventListener(name)` routes them separately and an older
+ *     client that only reads `onmessage` silently ignores them (backward safe).
+ */
+export declare const REALTIME_PROTOCOL_VERSION = 1;
+/** Named SSE event carrying the one-time handshake ({@link RealtimeHandshake}). */
+export declare const REALTIME_SSE_HANDSHAKE_EVENT = "handshake";
+/** Named SSE event carrying a rotated subscribe token ({@link RealtimeTokenFrame}). */
+export declare const REALTIME_SSE_TOKEN_EVENT = "token";
+/**
+ * Capability advertised by the hosted gateway: awareness/presence is NOT
+ * forwarded (it lives only on the in-process emitter, never in `sync_events`),
+ * so the collab client must keep its own presence cadence. The framework's
+ * in-process SSE path forwards awareness and therefore sends no handshake — the
+ * client treats an absent handshake as "all capabilities present."
+ */
+export declare const REALTIME_CAP_NO_AWARENESS = "no-awareness";
+export interface RealtimeHandshake {
+    protocol: number;
+    capabilities: string[];
+}
+export interface RealtimeTokenFrame {
+    token: string;
+    /** ISO expiry, informational; the client re-mints/rotates before this. */
+    expiresAt?: string;
+}
+export declare function buildHandshakeFrame(capabilities?: readonly string[]): RealtimeHandshake;
+export declare function parseHandshakeFrame(data: string): RealtimeHandshake | null;
+export declare function parseTokenFrame(data: string): RealtimeTokenFrame | null;
+//# sourceMappingURL=realtime-protocol.d.ts.map

package/dist/realtime-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-protocol.d.ts","sourceRoot":"","sources":["../src/realtime-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAE3C,mFAAmF;AACnF,eAAO,MAAM,4BAA4B,cAAc,CAAC;AACxD,uFAAuF;AACvF,eAAO,MAAM,wBAAwB,UAAU,CAAC;AAEhD;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,iBAAiB,CAAC;AAExD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,mBAAmB,CACjC,YAAY,GAAE,SAAS,MAAM,EAAO,GACnC,iBAAiB,CAKnB;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAoB1E;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAkBvE"}

package/dist/realtime-protocol.js

@@ -0,0 +1,69 @@
+/**
+ * Realtime SSE wire protocol — shared by the server SSE handlers (framework
+ * in-process path + the hosted Realtime Gateway) and the client transport.
+ *
+ * Pure constants, types, and parsers only — NO h3/node/browser deps — so both
+ * the Node server and the browser client import it.
+ *
+ * Frame taxonomy:
+ *   - CHANGE / batch frames ride the default (unnamed) SSE `message` event and
+ *     are parsed by the client's existing `normalizeEventPayload`. Unchanged.
+ *   - CONTROL frames (handshake, token rotation) ride NAMED SSE events, so
+ *     `EventSource.addEventListener(name)` routes them separately and an older
+ *     client that only reads `onmessage` silently ignores them (backward safe).
+ */
+export const REALTIME_PROTOCOL_VERSION = 1;
+/** Named SSE event carrying the one-time handshake ({@link RealtimeHandshake}). */
+export const REALTIME_SSE_HANDSHAKE_EVENT = "handshake";
+/** Named SSE event carrying a rotated subscribe token ({@link RealtimeTokenFrame}). */
+export const REALTIME_SSE_TOKEN_EVENT = "token";
+/**
+ * Capability advertised by the hosted gateway: awareness/presence is NOT
+ * forwarded (it lives only on the in-process emitter, never in `sync_events`),
+ * so the collab client must keep its own presence cadence. The framework's
+ * in-process SSE path forwards awareness and therefore sends no handshake — the
+ * client treats an absent handshake as "all capabilities present."
+ */
+export const REALTIME_CAP_NO_AWARENESS = "no-awareness";
+export function buildHandshakeFrame(capabilities = []) {
+    return {
+        protocol: REALTIME_PROTOCOL_VERSION,
+        capabilities: [...capabilities],
+    };
+}
+export function parseHandshakeFrame(data) {
+    try {
+        const parsed = JSON.parse(data);
+        if (parsed &&
+            typeof parsed === "object" &&
+            typeof parsed.protocol === "number" &&
+            Array.isArray(parsed.capabilities)) {
+            return {
+                protocol: parsed.protocol,
+                capabilities: parsed.capabilities.filter((c) => typeof c === "string"),
+            };
+        }
+    }
+    catch {
+        // fall through
+    }
+    return null;
+}
+export function parseTokenFrame(data) {
+    try {
+        const parsed = JSON.parse(data);
+        if (parsed &&
+            typeof parsed === "object" &&
+            typeof parsed.token === "string") {
+            return {
+                token: parsed.token,
+                expiresAt: typeof parsed.expiresAt === "string" ? parsed.expiresAt : undefined,
+            };
+        }
+    }
+    catch {
+        // fall through
+    }
+    return null;
+}
+//# sourceMappingURL=realtime-protocol.js.map

package/dist/realtime-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-protocol.js","sourceRoot":"","sources":["../src/realtime-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C,mFAAmF;AACnF,MAAM,CAAC,MAAM,4BAA4B,GAAG,WAAW,CAAC;AACxD,uFAAuF;AACvF,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,cAAc,CAAC;AAaxD,MAAM,UAAU,mBAAmB,CACjC,YAAY,GAAsB,EAAE;IAEpC,OAAO;QACL,QAAQ,EAAE,yBAAyB;QACnC,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IACE,MAAM;YACN,OAAO,MAAM,KAAK,QAAQ;YAC1B,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACnC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAClC,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CACtC,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CACnD;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IACE,MAAM;YACN,OAAO,MAAM,KAAK,QAAQ;YAC1B,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAChC,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EACP,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aACtE,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["/**\n * Realtime SSE wire protocol — shared by the server SSE handlers (framework\n * in-process path + the hosted Realtime Gateway) and the client transport.\n *\n * Pure constants, types, and parsers only — NO h3/node/browser deps — so both\n * the Node server and the browser client import it.\n *\n * Frame taxonomy:\n *   - CHANGE / batch frames ride the default (unnamed) SSE `message` event and\n *     are parsed by the client's existing `normalizeEventPayload`. Unchanged.\n *   - CONTROL frames (handshake, token rotation) ride NAMED SSE events, so\n *     `EventSource.addEventListener(name)` routes them separately and an older\n *     client that only reads `onmessage` silently ignores them (backward safe).\n */\n\nexport const REALTIME_PROTOCOL_VERSION = 1;\n\n/** Named SSE event carrying the one-time handshake ({@link RealtimeHandshake}). */\nexport const REALTIME_SSE_HANDSHAKE_EVENT = \"handshake\";\n/** Named SSE event carrying a rotated subscribe token ({@link RealtimeTokenFrame}). */\nexport const REALTIME_SSE_TOKEN_EVENT = \"token\";\n\n/**\n * Capability advertised by the hosted gateway: awareness/presence is NOT\n * forwarded (it lives only on the in-process emitter, never in `sync_events`),\n * so the collab client must keep its own presence cadence. The framework's\n * in-process SSE path forwards awareness and therefore sends no handshake — the\n * client treats an absent handshake as \"all capabilities present.\"\n */\nexport const REALTIME_CAP_NO_AWARENESS = \"no-awareness\";\n\nexport interface RealtimeHandshake {\n  protocol: number;\n  capabilities: string[];\n}\n\nexport interface RealtimeTokenFrame {\n  token: string;\n  /** ISO expiry, informational; the client re-mints/rotates before this. */\n  expiresAt?: string;\n}\n\nexport function buildHandshakeFrame(\n  capabilities: readonly string[] = [],\n): RealtimeHandshake {\n  return {\n    protocol: REALTIME_PROTOCOL_VERSION,\n    capabilities: [...capabilities],\n  };\n}\n\nexport function parseHandshakeFrame(data: string): RealtimeHandshake | null {\n  try {\n    const parsed = JSON.parse(data);\n    if (\n      parsed &&\n      typeof parsed === \"object\" &&\n      typeof parsed.protocol === \"number\" &&\n      Array.isArray(parsed.capabilities)\n    ) {\n      return {\n        protocol: parsed.protocol,\n        capabilities: parsed.capabilities.filter(\n          (c: unknown): c is string => typeof c === \"string\",\n        ),\n      };\n    }\n  } catch {\n    // fall through\n  }\n  return null;\n}\n\nexport function parseTokenFrame(data: string): RealtimeTokenFrame | null {\n  try {\n    const parsed = JSON.parse(data);\n    if (\n      parsed &&\n      typeof parsed === \"object\" &&\n      typeof parsed.token === \"string\"\n    ) {\n      return {\n        token: parsed.token,\n        expiresAt:\n          typeof parsed.expiresAt === \"string\" ? parsed.expiresAt : undefined,\n      };\n    }\n  } catch {\n    // fall through\n  }\n  return null;\n}\n"]}

package/dist/resources/handlers.d.ts

@@ -49,8 +49,8 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    error: string;
     ok?: undefined;
+    error: string;
 } | {
     error?: undefined;
     ok: boolean;

package/dist/secrets/routes.d.ts

@@ -34,16 +34,16 @@ export declare function createListSecretsHandler(): import("h3").EventHandlerWit
 /** POST /_agent-native/secrets/:key — write a secret. */
 export declare function createWriteSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     error: string;
-    status?: undefined;
     ok?: undefined;
+    status?: undefined;
 } | {
     ok: boolean;
     status: string;
     error?: undefined;
 } | {
+    ok?: undefined;
     error: string;
     removed?: undefined;
-    ok?: undefined;
 } | {
     ok: boolean;
     removed: boolean;
@@ -54,9 +54,9 @@ export declare function createWriteSecretHandler(): import("h3").EventHandlerWit
  * current stored value without changing anything. Useful for the "Test" button.
  */
 export declare function createTestSecretHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+    ok?: undefined;
     error: string;
     note?: undefined;
-    ok?: undefined;
 } | {
     ok: boolean;
     note?: undefined;

package/dist/server/collab-plugin.d.ts

@@ -5,10 +5,33 @@
  * ```ts
  * // server/plugins/collab.ts
  * import { createCollabPlugin } from "@agent-native/core/server";
- * export default createCollabPlugin({ table: "documents", contentColumn: "content" });
+ * export default createCollabPlugin({
+ *   table: "documents",
+ *   contentColumn: "content",
+ *   access: { mode: "resource", resourceType: "document" },
+ * });
  * ```
  */
 type NitroPluginDef = (nitroApp: any) => void | Promise<void>;
+export type CollabResourceIdResolver = (docId: string) => string | null | Promise<string | null>;
+export type CollabAccess = {
+    mode: "resource";
+    /** The shareable resource type registered via `registerShareableResource`. */
+    resourceType: string;
+    /** Map a collab document id to its parent shareable resource id. */
+    resolveResourceId?: CollabResourceIdResolver;
+} | {
+    /** Deliver collaboration events to every authenticated user. */
+    mode: "all-authenticated";
+};
+type NormalizedCollabAccess = {
+    mode: "resource";
+    resourceType: string;
+    resolveResourceId?: CollabResourceIdResolver;
+} | {
+    mode: "all-authenticated";
+    explicit: boolean;
+};
 export interface CollabPluginOptions {
     /** Table name containing document content. Default: "documents" */
     table?: string;
@@ -27,18 +50,25 @@ export interface CollabPluginOptions {
     contentType?: "text" | "json";
     /** Column name for JSON content (used when contentType is "json"). */
     jsonColumn?: string;
+    /**
+     * Access policy for collaboration routes and event delivery.
+     * Use `resource` for registered shareable resources, or explicitly choose
+     * `all-authenticated` for deployment-wide collaboration.
+     */
+    access?: CollabAccess;
     /**
      * The shareable resource type registered via `registerShareableResource`.
      * Used to enforce access checks on collab routes.
-     * Omit only for resources that are always public (no sharing model).
+     * @deprecated Use `access: { mode: "resource", resourceType }`.
      */
     resourceType?: string;
     /**
      * Map the collab document id to the shareable resource id. Many templates
      * use route-specific collab ids (for example, one doc per slide inside a
      * deck) while sharing is enforced at the parent resource level.
+     * @deprecated Use `access: { mode: "resource", resourceType, resolveResourceId }`.
      */
-    resolveResourceId?: (docId: string) => string | null | Promise<string | null>;
+    resolveResourceId?: CollabResourceIdResolver;
     /**
      * Maximum allowed body size in bytes for write operations
      * (update/text/json/patch). Requests exceeding this are rejected with 413.
@@ -46,6 +76,7 @@ export interface CollabPluginOptions {
      */
     maxPayloadBytes?: number;
 }
+export declare function normalizeCollabAccess(options: Pick<CollabPluginOptions, "access" | "resourceType" | "resolveResourceId">): NormalizedCollabAccess;
 export declare function createCollabPlugin(options?: CollabPluginOptions): NitroPluginDef;
 export {};
 //# sourceMappingURL=collab-plugin.d.ts.map

package/dist/server/collab-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collab-plugin.d.ts","sourceRoot":"","sources":["../../src/server/collab-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAiCH,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAmB9D,MAAM,WAAW,mBAAmB;IAClC,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC9E;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,kBAAkB,CAChC,OAAO,GAAE,mBAAwB,GAChC,cAAc,CAiShB"}
+{"version":3,"file":"collab-plugin.d.ts","sourceRoot":"","sources":["../../src/server/collab-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAiCH,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAY9D,MAAM,MAAM,wBAAwB,GAAG,CACrC,KAAK,EAAE,MAAM,KACV,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAE5C,MAAM,MAAM,YAAY,GACpB;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,8EAA8E;IAC9E,YAAY,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;CAC9C,GACD;IACE,gEAAgE;IAChE,IAAI,EAAE,mBAAmB,CAAC;CAC3B,CAAC;AAEN,KAAK,sBAAsB,GACvB;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;CAC9C,GACD;IACE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAgBN,MAAM,WAAW,mBAAmB;IAClC,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IAC7C;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,IAAI,CACX,mBAAmB,EACnB,QAAQ,GAAG,cAAc,GAAG,mBAAmB,CAChD,GACA,sBAAsB,CAkDxB;AAaD,wBAAgB,kBAAkB,CAChC,OAAO,GAAE,mBAAwB,GAChC,cAAc,CAsShB"}

package/dist/server/collab-plugin.js

@@ -5,7 +5,11 @@
  * ```ts
  * // server/plugins/collab.ts
  * import { createCollabPlugin } from "@agent-native/core/server";
- * export default createCollabPlugin({ table: "documents", contentColumn: "content" });
+ * export default createCollabPlugin({
+ *   table: "documents",
+ *   contentColumn: "content",
+ *   access: { mode: "resource", resourceType: "document" },
+ * });
  * ```
  */
 import { defineEventHandler, getMethod, setResponseStatus, } from "h3";
@@ -26,13 +30,68 @@ import { runWithRequestContext } from "./request-context.js";
 /** Default maximum body size in bytes for collab write operations (2 MB). */
 const DEFAULT_MAX_PAYLOAD_BYTES = 2 * 1024 * 1024;
 /**
- * Whether the no-resourceType warning has already been logged once per server
- * process. Avoids flooding logs on every request in templates that deliberately
- * have no sharing model.
+ * Tables whose implicit all-authenticated warning has already been logged in
+ * this process. Avoids duplicate warnings during hot reloads while still
+ * identifying every affected table.
  */
-let _unscoped_warning_logged = false;
+const COLLAB_WARNING_TABLES_KEY = "__agentNativeImplicitCollabAccessWarningTables__";
+const collabWarningGlobal = globalThis;
+const _unscoped_warning_tables = (collabWarningGlobal[COLLAB_WARNING_TABLES_KEY] ??= new Set());
+export function normalizeCollabAccess(options) {
+    const hasLegacyAccess = options.resourceType !== undefined ||
+        options.resolveResourceId !== undefined;
+    if (options.access && hasLegacyAccess) {
+        throw new Error('createCollabPlugin cannot combine "access" with the deprecated root "resourceType" or "resolveResourceId" options. Move those fields into access.');
+    }
+    if (options.access?.mode === "resource") {
+        if (!options.access.resourceType.trim()) {
+            throw new Error('createCollabPlugin access mode "resource" requires a non-empty resourceType.');
+        }
+        return options.access;
+    }
+    if (options.access?.mode === "all-authenticated") {
+        return { mode: "all-authenticated", explicit: true };
+    }
+    if (options.access) {
+        throw new Error(`createCollabPlugin received an unsupported access mode: ${String(options.access.mode)}`);
+    }
+    if (options.resourceType !== undefined) {
+        if (!options.resourceType.trim()) {
+            throw new Error('createCollabPlugin "resourceType" must be a non-empty string when provided.');
+        }
+        return {
+            mode: "resource",
+            resourceType: options.resourceType,
+            resolveResourceId: options.resolveResourceId,
+        };
+    }
+    if (options.resolveResourceId !== undefined) {
+        throw new Error('createCollabPlugin "resolveResourceId" requires a non-empty "resourceType".');
+    }
+    return { mode: "all-authenticated", explicit: false };
+}
+function warnForImplicitAllAuthenticatedAccess(table) {
+    if (_unscoped_warning_tables.has(table))
+        return;
+    _unscoped_warning_tables.add(table);
+    console.warn(`[collab] WARNING: createCollabPlugin for table "${table}" does not declare an access policy. ` +
+        "Collab events will be delivered to ALL authenticated users on this deployment without document-level access scoping. " +
+        'Use access: { mode: "resource", resourceType: "..." } for access-scoped delivery, ' +
+        'or access: { mode: "all-authenticated" } to explicitly acknowledge deployment-wide delivery.');
+}
 export function createCollabPlugin(options = {}) {
-    const { table = "documents", contentColumn = "content", idColumn = "id", autoSeed = true, resourceType, resolveResourceId, maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES, } = options;
+    const normalizedAccess = normalizeCollabAccess(options);
+    const { table = "documents", contentColumn = "content", idColumn = "id", autoSeed = true, maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES, } = options;
+    const resourceType = normalizedAccess.mode === "resource"
+        ? normalizedAccess.resourceType
+        : undefined;
+    const resolveResourceId = normalizedAccess.mode === "resource"
+        ? normalizedAccess.resolveResourceId
+        : undefined;
+    if (normalizedAccess.mode === "all-authenticated" &&
+        !normalizedAccess.explicit) {
+        warnForImplicitAllAuthenticatedAccess(table);
+    }
     return async (nitroApp) => {
         await awaitBootstrap(nitroApp);
         const P = FRAMEWORK_ROUTE_PREFIX;
@@ -51,12 +110,6 @@ export function createCollabPlugin(options = {}) {
         //     who don't match owner/org — instead of only degrading them to the
         //     poll fallback.
         // See also: SECURITY comment in poll.ts on canSeeChangeForUser.
-        if (!resourceType && !_unscoped_warning_logged) {
-            _unscoped_warning_logged = true;
-            console.warn("[collab] WARNING: createCollabPlugin called without resourceType. " +
-                "Collab events will be delivered to ALL authenticated users on this deployment " +
-                "without document-level access scoping. Set resourceType to enable access-scoped delivery.");
-        }
         const collabEmitter = getCollabEmitter();
         collabEmitter.on("collab", async (event) => {
             if (!resourceType) {

package/dist/server/collab-plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"collab-plugin.js","sourceRoot":"","sources":["../../src/server/collab-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,iBAAiB,GAElB,MAAM,IAAI,CAAC;AAEZ,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,cAAc,EACd,aAAa,EACb,eAAe,GAChB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAI7D,6EAA6E;AAC7E,MAAM,yBAAyB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AASlD;;;;GAIG;AACH,IAAI,wBAAwB,GAAG,KAAK,CAAC;AAwCrC,MAAM,UAAU,kBAAkB,CAChC,OAAO,GAAwB,EAAE;IAEjC,MAAM,EACJ,KAAK,GAAG,WAAW,EACnB,aAAa,GAAG,SAAS,EACzB,QAAQ,GAAG,IAAI,EACf,QAAQ,GAAG,IAAI,EACf,YAAY,EACZ,iBAAiB,EACjB,eAAe,GAAG,yBAAyB,GAC5C,GAAG,OAAO,CAAC;IAEZ,OAAO,KAAK,EAAE,QAAa,EAAE,EAAE;QAC7B,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,sBAAsB,CAAC;QAEjC,yEAAyE;QACzE,oEAAoE;QACpE,iEAAiE;QACjE,2EAA2E;QAC3E,wEAAwE;QACxE,mEAAmE;QACnE,qEAAqE;QACrE,kCAAkC;QAClC,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,0EAA0E;QAC1E,wEAAwE;QACxE,qBAAqB;QACrB,gEAAgE;QAChE,IAAI,CAAC,YAAY,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAC/C,wBAAwB,GAAG,IAAI,CAAC;YAChC,OAAO,CAAC,IAAI,CACV,oEAAoE;gBAClE,gFAAgF;gBAChF,2FAA2F,CAC9F,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;QACzC,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACzC,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,+EAA+E;gBAC/E,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,yEAAyE;YACzE,MAAM,KAAK,GAAG,KAAK,CAAC,KAA2B,CAAC;YAChD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,iBAAiB;oBAClC,CAAC,CAAC,MAAM,iBAAiB,CAAC,KAAK,CAAC;oBAChC,CAAC,CAAC,KAAK,CAAC;gBACV,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,+DAA+D;oBAC/D,mEAAmE;oBACnE,OAAO;gBACT,CAAC;gBAED,oEAAoE;gBACpE,wEAAwE;gBACxE,MAAM,EAAE,wBAAwB,EAAE,GAChC,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;gBACzC,MAAM,GAAG,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;gBACnD,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,EAAS,CAAC;gBAC9B,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;gBAC3C,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;qBACxB,MAAM,EAAE;qBACR,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;qBACvB,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;qBAC3C,KAAK,CAAC,CAAC,CAAC,CAAC;gBAEZ,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,oCAAoC;oBACpC,OAAO;gBACT,CAAC;gBAED,MAAM,UAAU,GACd,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;oBACrC,CAAC,CAAC,QAAQ,CAAC,UAAU;oBACrB,CAAC,CAAC,SAAS,CAAC;gBAChB,MAAM,KAAK,GACT,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAElE,oEAAoE;gBACpE,4DAA4D;gBAC5D,0DAA0D;gBAC1D,YAAY,CAAC;oBACX,GAAG,KAAK;oBACR,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5C,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3B,YAAY;oBACZ,UAAU;iBACX,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;gBAClE,yDAAyD;YAC3D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,wEAAwE;QACxE,sEAAsE;QACtE,mEAAmE;QACnE,oBAAoB;QACpB,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CACpB,GAAG,CAAC,SAAS,EACb,kBAAkB,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YAC1C,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;iBACtC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;iBACnB,KAAK,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;YAC5D,CAAC;YACD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAEhC,mDAAmD;YACnD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;gBACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;YAC9C,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,SAAS,CAAC;YAEzC,OAAO,qBAAqB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;gBAC5D,uEAAuE;gBACvE,iEAAiE;gBACjE,iEAAiE;gBACjE,wCAAwC;gBACxC,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,UAAU,GAAG,iBAAiB;wBAClC,CAAC,CAAC,MAAM,iBAAiB,CAAC,KAAK,CAAC;wBAChC,CAAC,CAAC,KAAK,CAAC;oBACV,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;oBAChC,CAAC;oBACD,MAAM,OAAO,GACX,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,CAAC;wBAC1C,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC;wBACxC,CAAC,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,MAAM,CAAC;wBAClD,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC;wBACxC,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC;oBAE5C,IAAI,OAAO,EAAE,CAAC;wBACZ,iEAAiE;wBACjE,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,YAAY,EACZ,UAAU,EACV,QAAQ,CACT,CAAC;wBACF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAmC,CAAC;wBAC5D,MAAM,cAAc,GAAyB;4BAC3C,YAAY;4BACZ,UAAU;4BACV,GAAG,CAAC,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;gCACzC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE;gCAChC,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;gCACpC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;gCAC3B,CAAC,CAAC,EAAE,CAAC;yBACR,CAAC;wBACF,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;4BAClB,KAAK,CAAC,OAAO,CAAC,qBAAqB,GAAG,cAAc,CAAC;wBACvD,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,mFAAmF;wBACnF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;wBAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;4BACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;4BAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;wBAChC,CAAC;wBACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAmC,CAAC;wBAC5D,MAAM,cAAc,GAAyB;4BAC3C,YAAY;4BACZ,UAAU;4BACV,GAAG,CAAC,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;gCACzC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE;gCAChC,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;gCACpC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;gCAC3B,CAAC,CAAC,EAAE,CAAC;yBACR,CAAC;wBACF,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;4BAClB,KAAK,CAAC,OAAO,CAAC,qBAAqB,GAAG,cAAc,CAAC;wBACvD,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,0CAA0C;gBAC1C,MAAM,aAAa,GACjB,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,CAAC;oBAC1C,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC;oBACxC,CAAC,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,MAAM,CAAC;oBAClD,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC;oBACxC,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC;gBAE5C,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,aAAa,GAAG,MAAM,CAC1B,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAC9C,CAAC;oBACF,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,eAAe,EAAE,CAAC;wBAC7D,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO;4BACL,KAAK,EAAE,iCAAiC,eAAe,SAAS;yBACjE,CAAC;oBACJ,CAAC;oBACD,iEAAiE;oBACjE,wDAAwD;oBACxD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;wBAClB,KAAK,CAAC,OAAO,CAAC,sBAAsB,GAAG,eAAe,CAAC;oBACzD,CAAC;gBACH,CAAC;gBAED,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,KAAK;oBACxC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC/B,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM;oBAC1C,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACjC,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM;oBACxC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC/B,IAAI,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,MAAM;oBAClD,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;gBACxC,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM;oBACxC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC/B,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK;oBACvC,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC9B,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM;oBACzC,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;gBAChC,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,MAAM;oBAC7C,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC9B,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,KAAK;oBACxC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YAChC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CACH,CAAC;QAEF,iDAAiD;QACjD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC;YAC9C,MAAM,UAAU,GAAG,MAAM;gBACvB,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa;gBACrC,CAAC,CAAC,aAAa,CAAC;YAElB,gDAAgD;YAChD,UAAU,CAAC,KAAK,IAAI,EAAE;gBACpB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;oBAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CACnC,UAAU,QAAQ,KAAK,UAAU,SAAS,KAAK,EAAE,CAClD,CAAC;oBACF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;wBACvB,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAW,CAAC;wBACtC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;wBAC3C,IAAI,MAAM;4BAAE,SAAS;wBAErB,IAAI,MAAM,EAAE,CAAC;4BACX,MAAM,GAAG,GAAI,GAAG,CAAC,UAAU,CAAY,IAAI,IAAI,CAAC;4BAChD,IAAI,CAAC;gCACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gCAC/B,MAAM,YAAY,GAAoB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;oCACzD,CAAC,CAAC,OAAO;oCACT,CAAC,CAAC,KAAK,CAAC;gCACV,MAAM,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;4BAC1D,CAAC;4BAAC,MAAM,CAAC;gCACP,sBAAsB;4BACxB,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,MAAM,OAAO,GAAI,GAAG,CAAC,UAAU,CAAY,IAAI,EAAE,CAAC;4BAClD,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;wBACrC,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,sDAAsD;gBACxD,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Nitro plugin that mounts collaborative editing routes.\n *\n * Templates opt in with one line:\n * ```ts\n * // server/plugins/collab.ts\n * import { createCollabPlugin } from \"@agent-native/core/server\";\n * export default createCollabPlugin({ table: \"documents\", contentColumn: \"content\" });\n * ```\n */\n\nimport {\n  defineEventHandler,\n  getMethod,\n  setResponseStatus,\n  type H3Event,\n} from \"h3\";\n\nimport { postAwareness, getActiveUsers } from \"../collab/awareness.js\";\nimport { getCollabEmitter } from \"../collab/emitter.js\";\nimport {\n  getCollabState,\n  postCollabUpdate,\n  postCollabText,\n  postCollabSearchReplace,\n} from \"../collab/routes.js\";\nimport { hasCollabState } from \"../collab/storage.js\";\nimport {\n  postCollabJson,\n  getCollabJson,\n  postCollabPatch,\n} from \"../collab/struct-routes.js\";\nimport { seedFromText, seedFromJson } from \"../collab/ydoc-manager.js\";\nimport { getDbExec } from \"../db/client.js\";\nimport { getOrgContext } from \"../org/context.js\";\nimport { resolveAccess, assertAccess } from \"../sharing/access.js\";\nimport { getSession } from \"./auth.js\";\nimport { FRAMEWORK_ROUTE_PREFIX } from \"./core-routes-plugin.js\";\nimport { getH3App, awaitBootstrap } from \"./framework-request-handler.js\";\nimport { recordChange } from \"./poll.js\";\nimport { runWithRequestContext } from \"./request-context.js\";\n\ntype NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\n/** Default maximum body size in bytes for collab write operations (2 MB). */\nconst DEFAULT_MAX_PAYLOAD_BYTES = 2 * 1024 * 1024;\n\ntype CollabAwarenessScope = {\n  owner?: string;\n  orgId?: string;\n  resourceType?: string;\n  resourceId?: string;\n};\n\n/**\n * Whether the no-resourceType warning has already been logged once per server\n * process. Avoids flooding logs on every request in templates that deliberately\n * have no sharing model.\n */\nlet _unscoped_warning_logged = false;\n\nexport interface CollabPluginOptions {\n  /** Table name containing document content. Default: \"documents\" */\n  table?: string;\n  /** Column name for text content. Default: \"content\" */\n  contentColumn?: string;\n  /** Column name for the document ID. Default: \"id\" */\n  idColumn?: string;\n  /** Whether to auto-seed existing documents on startup. Default: true */\n  autoSeed?: boolean;\n  /**\n   * Callback invoked after a collab update to sync the content column.\n   * If not provided, the plugin auto-syncs using table/contentColumn/idColumn.\n   */\n  onContentSync?: (docId: string, text: string) => Promise<void>;\n  /** Content type: \"text\" for Y.Text (default) or \"json\" for Y.Map/Y.Array. */\n  contentType?: \"text\" | \"json\";\n  /** Column name for JSON content (used when contentType is \"json\"). */\n  jsonColumn?: string;\n  /**\n   * The shareable resource type registered via `registerShareableResource`.\n   * Used to enforce access checks on collab routes.\n   * Omit only for resources that are always public (no sharing model).\n   */\n  resourceType?: string;\n  /**\n   * Map the collab document id to the shareable resource id. Many templates\n   * use route-specific collab ids (for example, one doc per slide inside a\n   * deck) while sharing is enforced at the parent resource level.\n   */\n  resolveResourceId?: (docId: string) => string | null | Promise<string | null>;\n  /**\n   * Maximum allowed body size in bytes for write operations\n   * (update/text/json/patch). Requests exceeding this are rejected with 413.\n   * Default: 2097152 (2 MB).\n   */\n  maxPayloadBytes?: number;\n}\n\nexport function createCollabPlugin(\n  options: CollabPluginOptions = {},\n): NitroPluginDef {\n  const {\n    table = \"documents\",\n    contentColumn = \"content\",\n    idColumn = \"id\",\n    autoSeed = true,\n    resourceType,\n    resolveResourceId,\n    maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES,\n  } = options;\n\n  return async (nitroApp: any) => {\n    await awaitBootstrap(nitroApp);\n    const P = FRAMEWORK_ROUTE_PREFIX;\n\n    // Wire collab emitter → poll ring buffer so clients receive Yjs updates.\n    // Security: when resourceType is configured, resolve the resource's\n    // owner/org so getChangesSinceForUser can scope delivery. We use\n    // resolveAccess to obtain the resource row — it already handles ownership,\n    // visibility, and share rows. In addition to the owner/org tags we also\n    // tag the event with `resourceType` + `resourceId` so the per-user\n    // delivery filter (canSeeChangeForUser) can evaluate resource access\n    // directly for non-owner sharees:\n    //   • tag the event with the resource owner's email and org (owner-scoped)\n    //     for backward compatibility with the conservative owner/org fast path.\n    //   • ALSO tag with resourceType/resourceId so canSeeChangeForUser can run\n    //     an access-aware (cached) check and push to explicit viewer+ sharees\n    //     who don't match owner/org — instead of only degrading them to the\n    //     poll fallback.\n    // See also: SECURITY comment in poll.ts on canSeeChangeForUser.\n    if (!resourceType && !_unscoped_warning_logged) {\n      _unscoped_warning_logged = true;\n      console.warn(\n        \"[collab] WARNING: createCollabPlugin called without resourceType. \" +\n          \"Collab events will be delivered to ALL authenticated users on this deployment \" +\n          \"without document-level access scoping. Set resourceType to enable access-scoped delivery.\",\n      );\n    }\n\n    const collabEmitter = getCollabEmitter();\n    collabEmitter.on(\"collab\", async (event) => {\n      if (!resourceType) {\n        // No access model — broadcast to all authenticated users (no owner/orgId tag).\n        recordChange(event);\n        return;\n      }\n\n      // Resolve the resource to learn its owner/org so we can scope the event.\n      const docId = event.docId as string | undefined;\n      if (!docId) {\n        recordChange(event);\n        return;\n      }\n\n      try {\n        const resourceId = resolveResourceId\n          ? await resolveResourceId(docId)\n          : docId;\n        if (!resourceId) {\n          // Cannot resolve resource — drop the event to avoid leaking to\n          // unauthorized pollers. The client will catch up via state-vector.\n          return;\n        }\n\n        // Load the resource row to get owner/org. resolveAccess fetches the\n        // resource row internally; use getShareableResource to read it cheaply.\n        const { requireShareableResource } =\n          await import(\"../sharing/registry.js\");\n        const reg = requireShareableResource(resourceType);\n        const db = reg.getDb() as any;\n        const { eq } = await import(\"drizzle-orm\");\n        const [resource] = await db\n          .select()\n          .from(reg.resourceTable)\n          .where(eq(reg.resourceTable.id, resourceId))\n          .limit(1);\n\n        if (!resource) {\n          // Resource deleted — drop silently.\n          return;\n        }\n\n        const ownerEmail =\n          typeof resource.ownerEmail === \"string\"\n            ? resource.ownerEmail\n            : undefined;\n        const orgId =\n          typeof resource.orgId === \"string\" ? resource.orgId : undefined;\n\n        // Tag the event with owner/org (backward-compat fast path) AND with\n        // resourceType/resourceId so canSeeChangeForUser can run an\n        // access-aware check for non-owner sharees (see poll.ts).\n        recordChange({\n          ...event,\n          ...(ownerEmail ? { owner: ownerEmail } : {}),\n          ...(orgId ? { orgId } : {}),\n          resourceType,\n          resourceId,\n        });\n      } catch {\n        // If we fail to resolve the resource (DB not ready, etc.) we skip\n        // the event rather than broadcasting it without scoping.\n      }\n    });\n\n    // Mount collab routes — manual method dispatch since the path layout is\n    // `/collab/:docId/<action>`. The framework strips the `/collab` mount\n    // prefix from event.url.pathname before calling us, so we see e.g.\n    // `/abc-123/state`.\n    getH3App(nitroApp).use(\n      `${P}/collab`,\n      defineEventHandler(async (event: H3Event) => {\n        const parts = (event.url?.pathname || \"\")\n          .replace(/^\\/+/, \"\")\n          .split(\"/\");\n        const docId = parts[0] || \"\";\n        const action = parts[1] || \"\";\n        if (!docId) return;\n        if (event.context) {\n          event.context.params = { ...event.context.params, docId };\n        }\n        const method = getMethod(event);\n\n        // Auth check — all collab routes require a session\n        const session = await getSession(event).catch(() => null);\n        if (!session?.email) {\n          setResponseStatus(event, 401);\n          return { error: \"Authentication required\" };\n        }\n\n        const orgCtx = await getOrgContext(event).catch(() => null);\n        const userEmail = session.email;\n        const orgId = orgCtx?.orgId ?? undefined;\n\n        return runWithRequestContext({ userEmail, orgId }, async () => {\n          // Access check — require at least viewer for reads, editor for writes.\n          // Awareness routes (POST awareness / GET users) require the same\n          // level as other reads so that knowledge of who is editing a doc\n          // doesn't leak to users without access.\n          if (resourceType) {\n            const resourceId = resolveResourceId\n              ? await resolveResourceId(docId)\n              : docId;\n            if (!resourceId) {\n              setResponseStatus(event, 404);\n              return { error: \"Not found\" };\n            }\n            const isWrite =\n              (action === \"update\" && method === \"POST\") ||\n              (action === \"text\" && method === \"POST\") ||\n              (action === \"search-replace\" && method === \"POST\") ||\n              (action === \"json\" && method === \"POST\") ||\n              (action === \"patch\" && method === \"POST\");\n\n            if (isWrite) {\n              // assertAccess throws ForbiddenError (→ 403) if no editor access\n              const access = await assertAccess(\n                resourceType,\n                resourceId,\n                \"editor\",\n              );\n              const resource = access.resource as Record<string, unknown>;\n              const awarenessScope: CollabAwarenessScope = {\n                resourceType,\n                resourceId,\n                ...(typeof resource.ownerEmail === \"string\"\n                  ? { owner: resource.ownerEmail }\n                  : {}),\n                ...(typeof resource.orgId === \"string\"\n                  ? { orgId: resource.orgId }\n                  : {}),\n              };\n              if (event.context) {\n                event.context._collabAwarenessScope = awarenessScope;\n              }\n            } else {\n              // resolveAccess returns null when no access; return 404 to avoid leaking existence\n              const access = await resolveAccess(resourceType, resourceId);\n              if (!access) {\n                setResponseStatus(event, 404);\n                return { error: \"Not found\" };\n              }\n              const resource = access.resource as Record<string, unknown>;\n              const awarenessScope: CollabAwarenessScope = {\n                resourceType,\n                resourceId,\n                ...(typeof resource.ownerEmail === \"string\"\n                  ? { owner: resource.ownerEmail }\n                  : {}),\n                ...(typeof resource.orgId === \"string\"\n                  ? { orgId: resource.orgId }\n                  : {}),\n              };\n              if (event.context) {\n                event.context._collabAwarenessScope = awarenessScope;\n              }\n            }\n          }\n\n          // Payload size limit for write operations\n          const isWriteAction =\n            (action === \"update\" && method === \"POST\") ||\n            (action === \"text\" && method === \"POST\") ||\n            (action === \"search-replace\" && method === \"POST\") ||\n            (action === \"json\" && method === \"POST\") ||\n            (action === \"patch\" && method === \"POST\");\n\n          if (isWriteAction) {\n            const contentLength = Number(\n              event.headers?.get?.(\"content-length\") ?? NaN,\n            );\n            if (!isNaN(contentLength) && contentLength > maxPayloadBytes) {\n              setResponseStatus(event, 413);\n              return {\n                error: `Payload too large. Maximum is ${maxPayloadBytes} bytes.`,\n              };\n            }\n            // Store limit in context so route handlers can enforce it on the\n            // parsed body when content-length is absent or spoofed.\n            if (event.context) {\n              event.context._collabMaxPayloadBytes = maxPayloadBytes;\n            }\n          }\n\n          if (action === \"state\" && method === \"GET\")\n            return getCollabState(event);\n          if (action === \"update\" && method === \"POST\")\n            return postCollabUpdate(event);\n          if (action === \"text\" && method === \"POST\")\n            return postCollabText(event);\n          if (action === \"search-replace\" && method === \"POST\")\n            return postCollabSearchReplace(event);\n          if (action === \"json\" && method === \"POST\")\n            return postCollabJson(event);\n          if (action === \"json\" && method === \"GET\")\n            return getCollabJson(event);\n          if (action === \"patch\" && method === \"POST\")\n            return postCollabPatch(event);\n          if (action === \"awareness\" && method === \"POST\")\n            return postAwareness(event);\n          if (action === \"users\" && method === \"GET\")\n            return getActiveUsers(event);\n          setResponseStatus(event, 404);\n          return { error: \"Not found\" };\n        });\n      }),\n    );\n\n    // Auto-seed existing documents into collab state\n    if (autoSeed) {\n      const isJson = options.contentType === \"json\";\n      const seedColumn = isJson\n        ? options.jsonColumn || contentColumn\n        : contentColumn;\n\n      // Run in background so it doesn't block startup\n      setTimeout(async () => {\n        try {\n          const client = getDbExec();\n          const { rows } = await client.execute(\n            `SELECT ${idColumn}, ${seedColumn} FROM ${table}`,\n          );\n          for (const row of rows) {\n            const docId = row[idColumn] as string;\n            const exists = await hasCollabState(docId);\n            if (exists) continue;\n\n            if (isJson) {\n              const raw = (row[seedColumn] as string) ?? \"{}\";\n              try {\n                const parsed = JSON.parse(raw);\n                const inferredType: \"map\" | \"array\" = Array.isArray(parsed)\n                  ? \"array\"\n                  : \"map\";\n                await seedFromJson(docId, parsed, \"data\", inferredType);\n              } catch {\n                // Invalid JSON — skip\n              }\n            } else {\n              const content = (row[seedColumn] as string) ?? \"\";\n              await seedFromText(docId, content);\n            }\n          }\n        } catch {\n          // Table may not exist yet on first boot — that's fine\n        }\n      }, 1000);\n    }\n  };\n}\n"]}
+{"version":3,"file":"collab-plugin.js","sourceRoot":"","sources":["../../src/server/collab-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,iBAAiB,GAElB,MAAM,IAAI,CAAC;AAEZ,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,cAAc,EACd,aAAa,EACb,eAAe,GAChB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAI7D,6EAA6E;AAC7E,MAAM,yBAAyB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAqClD;;;;GAIG;AACH,MAAM,yBAAyB,GAC7B,kDAAkD,CAAC;AACrD,MAAM,mBAAmB,GAAG,UAE3B,CAAC;AACF,MAAM,wBAAwB,GAAG,CAAC,mBAAmB,CACnD,yBAAyB,CAC1B,KAAK,IAAI,GAAG,EAAU,CAAC,CAAC;AA+CzB,MAAM,UAAU,qBAAqB,CACnC,OAGC;IAED,MAAM,eAAe,GACnB,OAAO,CAAC,YAAY,KAAK,SAAS;QAClC,OAAO,CAAC,iBAAiB,KAAK,SAAS,CAAC;IAE1C,IAAI,OAAO,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,mJAAmJ,CACpJ,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,2DAA2D,MAAM,CAAE,OAAO,CAAC,MAA6B,CAAC,IAAI,CAAC,EAAE,CACjH,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;SAC7C,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,qCAAqC,CAAC,KAAa;IAC1D,IAAI,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO;IAChD,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO,CAAC,IAAI,CACV,mDAAmD,KAAK,uCAAuC;QAC7F,uHAAuH;QACvH,oFAAoF;QACpF,8FAA8F,CACjG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAAO,GAAwB,EAAE;IAEjC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,EACJ,KAAK,GAAG,WAAW,EACnB,aAAa,GAAG,SAAS,EACzB,QAAQ,GAAG,IAAI,EACf,QAAQ,GAAG,IAAI,EACf,eAAe,GAAG,yBAAyB,GAC5C,GAAG,OAAO,CAAC;IACZ,MAAM,YAAY,GAChB,gBAAgB,CAAC,IAAI,KAAK,UAAU;QAClC,CAAC,CAAC,gBAAgB,CAAC,YAAY;QAC/B,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,iBAAiB,GACrB,gBAAgB,CAAC,IAAI,KAAK,UAAU;QAClC,CAAC,CAAC,gBAAgB,CAAC,iBAAiB;QACpC,CAAC,CAAC,SAAS,CAAC;IAEhB,IACE,gBAAgB,CAAC,IAAI,KAAK,mBAAmB;QAC7C,CAAC,gBAAgB,CAAC,QAAQ,EAC1B,CAAC;QACD,qCAAqC,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,KAAK,EAAE,QAAa,EAAE,EAAE;QAC7B,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,sBAAsB,CAAC;QAEjC,yEAAyE;QACzE,oEAAoE;QACpE,iEAAiE;QACjE,2EAA2E;QAC3E,wEAAwE;QACxE,mEAAmE;QACnE,qEAAqE;QACrE,kCAAkC;QAClC,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,0EAA0E;QAC1E,wEAAwE;QACxE,qBAAqB;QACrB,gEAAgE;QAChE,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;QACzC,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACzC,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,+EAA+E;gBAC/E,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,yEAAyE;YACzE,MAAM,KAAK,GAAG,KAAK,CAAC,KAA2B,CAAC;YAChD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,iBAAiB;oBAClC,CAAC,CAAC,MAAM,iBAAiB,CAAC,KAAK,CAAC;oBAChC,CAAC,CAAC,KAAK,CAAC;gBACV,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,+DAA+D;oBAC/D,mEAAmE;oBACnE,OAAO;gBACT,CAAC;gBAED,oEAAoE;gBACpE,wEAAwE;gBACxE,MAAM,EAAE,wBAAwB,EAAE,GAChC,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;gBACzC,MAAM,GAAG,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;gBACnD,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,EAAS,CAAC;gBAC9B,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;gBAC3C,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;qBACxB,MAAM,EAAE;qBACR,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;qBACvB,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;qBAC3C,KAAK,CAAC,CAAC,CAAC,CAAC;gBAEZ,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,oCAAoC;oBACpC,OAAO;gBACT,CAAC;gBAED,MAAM,UAAU,GACd,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;oBACrC,CAAC,CAAC,QAAQ,CAAC,UAAU;oBACrB,CAAC,CAAC,SAAS,CAAC;gBAChB,MAAM,KAAK,GACT,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAElE,oEAAoE;gBACpE,4DAA4D;gBAC5D,0DAA0D;gBAC1D,YAAY,CAAC;oBACX,GAAG,KAAK;oBACR,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5C,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3B,YAAY;oBACZ,UAAU;iBACX,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;gBAClE,yDAAyD;YAC3D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,wEAAwE;QACxE,sEAAsE;QACtE,mEAAmE;QACnE,oBAAoB;QACpB,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CACpB,GAAG,CAAC,SAAS,EACb,kBAAkB,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;YAC1C,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;iBACtC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;iBACnB,KAAK,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;YAC5D,CAAC;YACD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAEhC,mDAAmD;YACnD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;gBACpB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;YAC9C,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,SAAS,CAAC;YAEzC,OAAO,qBAAqB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;gBAC5D,uEAAuE;gBACvE,iEAAiE;gBACjE,iEAAiE;gBACjE,wCAAwC;gBACxC,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,UAAU,GAAG,iBAAiB;wBAClC,CAAC,CAAC,MAAM,iBAAiB,CAAC,KAAK,CAAC;wBAChC,CAAC,CAAC,KAAK,CAAC;oBACV,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;oBAChC,CAAC;oBACD,MAAM,OAAO,GACX,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,CAAC;wBAC1C,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC;wBACxC,CAAC,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,MAAM,CAAC;wBAClD,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC;wBACxC,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC;oBAE5C,IAAI,OAAO,EAAE,CAAC;wBACZ,iEAAiE;wBACjE,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,YAAY,EACZ,UAAU,EACV,QAAQ,CACT,CAAC;wBACF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAmC,CAAC;wBAC5D,MAAM,cAAc,GAAyB;4BAC3C,YAAY;4BACZ,UAAU;4BACV,GAAG,CAAC,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;gCACzC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE;gCAChC,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;gCACpC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;gCAC3B,CAAC,CAAC,EAAE,CAAC;yBACR,CAAC;wBACF,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;4BAClB,KAAK,CAAC,OAAO,CAAC,qBAAqB,GAAG,cAAc,CAAC;wBACvD,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,mFAAmF;wBACnF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;wBAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;4BACZ,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;4BAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;wBAChC,CAAC;wBACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAmC,CAAC;wBAC5D,MAAM,cAAc,GAAyB;4BAC3C,YAAY;4BACZ,UAAU;4BACV,GAAG,CAAC,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;gCACzC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE;gCAChC,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;gCACpC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;gCAC3B,CAAC,CAAC,EAAE,CAAC;yBACR,CAAC;wBACF,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;4BAClB,KAAK,CAAC,OAAO,CAAC,qBAAqB,GAAG,cAAc,CAAC;wBACvD,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,0CAA0C;gBAC1C,MAAM,aAAa,GACjB,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,CAAC;oBAC1C,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC;oBACxC,CAAC,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,MAAM,CAAC;oBAClD,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC;oBACxC,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC;gBAE5C,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,aAAa,GAAG,MAAM,CAC1B,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAC9C,CAAC;oBACF,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,eAAe,EAAE,CAAC;wBAC7D,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC9B,OAAO;4BACL,KAAK,EAAE,iCAAiC,eAAe,SAAS;yBACjE,CAAC;oBACJ,CAAC;oBACD,iEAAiE;oBACjE,wDAAwD;oBACxD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;wBAClB,KAAK,CAAC,OAAO,CAAC,sBAAsB,GAAG,eAAe,CAAC;oBACzD,CAAC;gBACH,CAAC;gBAED,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,KAAK;oBACxC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC/B,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM;oBAC1C,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBACjC,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM;oBACxC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC/B,IAAI,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,MAAM;oBAClD,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;gBACxC,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM;oBACxC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC/B,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK;oBACvC,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC9B,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM;oBACzC,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;gBAChC,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,MAAM;oBAC7C,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC9B,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,KAAK;oBACxC,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC/B,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9B,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YAChC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CACH,CAAC;QAEF,iDAAiD;QACjD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC;YAC9C,MAAM,UAAU,GAAG,MAAM;gBACvB,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa;gBACrC,CAAC,CAAC,aAAa,CAAC;YAElB,gDAAgD;YAChD,UAAU,CAAC,KAAK,IAAI,EAAE;gBACpB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;oBAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CACnC,UAAU,QAAQ,KAAK,UAAU,SAAS,KAAK,EAAE,CAClD,CAAC;oBACF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;wBACvB,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAW,CAAC;wBACtC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;wBAC3C,IAAI,MAAM;4BAAE,SAAS;wBAErB,IAAI,MAAM,EAAE,CAAC;4BACX,MAAM,GAAG,GAAI,GAAG,CAAC,UAAU,CAAY,IAAI,IAAI,CAAC;4BAChD,IAAI,CAAC;gCACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gCAC/B,MAAM,YAAY,GAAoB,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;oCACzD,CAAC,CAAC,OAAO;oCACT,CAAC,CAAC,KAAK,CAAC;gCACV,MAAM,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;4BAC1D,CAAC;4BAAC,MAAM,CAAC;gCACP,sBAAsB;4BACxB,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,MAAM,OAAO,GAAI,GAAG,CAAC,UAAU,CAAY,IAAI,EAAE,CAAC;4BAClD,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;wBACrC,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,sDAAsD;gBACxD,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Nitro plugin that mounts collaborative editing routes.\n *\n * Templates opt in with one line:\n * ```ts\n * // server/plugins/collab.ts\n * import { createCollabPlugin } from \"@agent-native/core/server\";\n * export default createCollabPlugin({\n *   table: \"documents\",\n *   contentColumn: \"content\",\n *   access: { mode: \"resource\", resourceType: \"document\" },\n * });\n * ```\n */\n\nimport {\n  defineEventHandler,\n  getMethod,\n  setResponseStatus,\n  type H3Event,\n} from \"h3\";\n\nimport { postAwareness, getActiveUsers } from \"../collab/awareness.js\";\nimport { getCollabEmitter } from \"../collab/emitter.js\";\nimport {\n  getCollabState,\n  postCollabUpdate,\n  postCollabText,\n  postCollabSearchReplace,\n} from \"../collab/routes.js\";\nimport { hasCollabState } from \"../collab/storage.js\";\nimport {\n  postCollabJson,\n  getCollabJson,\n  postCollabPatch,\n} from \"../collab/struct-routes.js\";\nimport { seedFromText, seedFromJson } from \"../collab/ydoc-manager.js\";\nimport { getDbExec } from \"../db/client.js\";\nimport { getOrgContext } from \"../org/context.js\";\nimport { resolveAccess, assertAccess } from \"../sharing/access.js\";\nimport { getSession } from \"./auth.js\";\nimport { FRAMEWORK_ROUTE_PREFIX } from \"./core-routes-plugin.js\";\nimport { getH3App, awaitBootstrap } from \"./framework-request-handler.js\";\nimport { recordChange } from \"./poll.js\";\nimport { runWithRequestContext } from \"./request-context.js\";\n\ntype NitroPluginDef = (nitroApp: any) => void | Promise<void>;\n\n/** Default maximum body size in bytes for collab write operations (2 MB). */\nconst DEFAULT_MAX_PAYLOAD_BYTES = 2 * 1024 * 1024;\n\ntype CollabAwarenessScope = {\n  owner?: string;\n  orgId?: string;\n  resourceType?: string;\n  resourceId?: string;\n};\n\nexport type CollabResourceIdResolver = (\n  docId: string,\n) => string | null | Promise<string | null>;\n\nexport type CollabAccess =\n  | {\n      mode: \"resource\";\n      /** The shareable resource type registered via `registerShareableResource`. */\n      resourceType: string;\n      /** Map a collab document id to its parent shareable resource id. */\n      resolveResourceId?: CollabResourceIdResolver;\n    }\n  | {\n      /** Deliver collaboration events to every authenticated user. */\n      mode: \"all-authenticated\";\n    };\n\ntype NormalizedCollabAccess =\n  | {\n      mode: \"resource\";\n      resourceType: string;\n      resolveResourceId?: CollabResourceIdResolver;\n    }\n  | {\n      mode: \"all-authenticated\";\n      explicit: boolean;\n    };\n\n/**\n * Tables whose implicit all-authenticated warning has already been logged in\n * this process. Avoids duplicate warnings during hot reloads while still\n * identifying every affected table.\n */\nconst COLLAB_WARNING_TABLES_KEY =\n  \"__agentNativeImplicitCollabAccessWarningTables__\";\nconst collabWarningGlobal = globalThis as typeof globalThis & {\n  [COLLAB_WARNING_TABLES_KEY]?: Set<string>;\n};\nconst _unscoped_warning_tables = (collabWarningGlobal[\n  COLLAB_WARNING_TABLES_KEY\n] ??= new Set<string>());\n\nexport interface CollabPluginOptions {\n  /** Table name containing document content. Default: \"documents\" */\n  table?: string;\n  /** Column name for text content. Default: \"content\" */\n  contentColumn?: string;\n  /** Column name for the document ID. Default: \"id\" */\n  idColumn?: string;\n  /** Whether to auto-seed existing documents on startup. Default: true */\n  autoSeed?: boolean;\n  /**\n   * Callback invoked after a collab update to sync the content column.\n   * If not provided, the plugin auto-syncs using table/contentColumn/idColumn.\n   */\n  onContentSync?: (docId: string, text: string) => Promise<void>;\n  /** Content type: \"text\" for Y.Text (default) or \"json\" for Y.Map/Y.Array. */\n  contentType?: \"text\" | \"json\";\n  /** Column name for JSON content (used when contentType is \"json\"). */\n  jsonColumn?: string;\n  /**\n   * Access policy for collaboration routes and event delivery.\n   * Use `resource` for registered shareable resources, or explicitly choose\n   * `all-authenticated` for deployment-wide collaboration.\n   */\n  access?: CollabAccess;\n  /**\n   * The shareable resource type registered via `registerShareableResource`.\n   * Used to enforce access checks on collab routes.\n   * @deprecated Use `access: { mode: \"resource\", resourceType }`.\n   */\n  resourceType?: string;\n  /**\n   * Map the collab document id to the shareable resource id. Many templates\n   * use route-specific collab ids (for example, one doc per slide inside a\n   * deck) while sharing is enforced at the parent resource level.\n   * @deprecated Use `access: { mode: \"resource\", resourceType, resolveResourceId }`.\n   */\n  resolveResourceId?: CollabResourceIdResolver;\n  /**\n   * Maximum allowed body size in bytes for write operations\n   * (update/text/json/patch). Requests exceeding this are rejected with 413.\n   * Default: 2097152 (2 MB).\n   */\n  maxPayloadBytes?: number;\n}\n\nexport function normalizeCollabAccess(\n  options: Pick<\n    CollabPluginOptions,\n    \"access\" | \"resourceType\" | \"resolveResourceId\"\n  >,\n): NormalizedCollabAccess {\n  const hasLegacyAccess =\n    options.resourceType !== undefined ||\n    options.resolveResourceId !== undefined;\n\n  if (options.access && hasLegacyAccess) {\n    throw new Error(\n      'createCollabPlugin cannot combine \"access\" with the deprecated root \"resourceType\" or \"resolveResourceId\" options. Move those fields into access.',\n    );\n  }\n\n  if (options.access?.mode === \"resource\") {\n    if (!options.access.resourceType.trim()) {\n      throw new Error(\n        'createCollabPlugin access mode \"resource\" requires a non-empty resourceType.',\n      );\n    }\n    return options.access;\n  }\n\n  if (options.access?.mode === \"all-authenticated\") {\n    return { mode: \"all-authenticated\", explicit: true };\n  }\n\n  if (options.access) {\n    throw new Error(\n      `createCollabPlugin received an unsupported access mode: ${String((options.access as { mode?: unknown }).mode)}`,\n    );\n  }\n\n  if (options.resourceType !== undefined) {\n    if (!options.resourceType.trim()) {\n      throw new Error(\n        'createCollabPlugin \"resourceType\" must be a non-empty string when provided.',\n      );\n    }\n    return {\n      mode: \"resource\",\n      resourceType: options.resourceType,\n      resolveResourceId: options.resolveResourceId,\n    };\n  }\n\n  if (options.resolveResourceId !== undefined) {\n    throw new Error(\n      'createCollabPlugin \"resolveResourceId\" requires a non-empty \"resourceType\".',\n    );\n  }\n\n  return { mode: \"all-authenticated\", explicit: false };\n}\n\nfunction warnForImplicitAllAuthenticatedAccess(table: string): void {\n  if (_unscoped_warning_tables.has(table)) return;\n  _unscoped_warning_tables.add(table);\n  console.warn(\n    `[collab] WARNING: createCollabPlugin for table \"${table}\" does not declare an access policy. ` +\n      \"Collab events will be delivered to ALL authenticated users on this deployment without document-level access scoping. \" +\n      'Use access: { mode: \"resource\", resourceType: \"...\" } for access-scoped delivery, ' +\n      'or access: { mode: \"all-authenticated\" } to explicitly acknowledge deployment-wide delivery.',\n  );\n}\n\nexport function createCollabPlugin(\n  options: CollabPluginOptions = {},\n): NitroPluginDef {\n  const normalizedAccess = normalizeCollabAccess(options);\n  const {\n    table = \"documents\",\n    contentColumn = \"content\",\n    idColumn = \"id\",\n    autoSeed = true,\n    maxPayloadBytes = DEFAULT_MAX_PAYLOAD_BYTES,\n  } = options;\n  const resourceType =\n    normalizedAccess.mode === \"resource\"\n      ? normalizedAccess.resourceType\n      : undefined;\n  const resolveResourceId =\n    normalizedAccess.mode === \"resource\"\n      ? normalizedAccess.resolveResourceId\n      : undefined;\n\n  if (\n    normalizedAccess.mode === \"all-authenticated\" &&\n    !normalizedAccess.explicit\n  ) {\n    warnForImplicitAllAuthenticatedAccess(table);\n  }\n\n  return async (nitroApp: any) => {\n    await awaitBootstrap(nitroApp);\n    const P = FRAMEWORK_ROUTE_PREFIX;\n\n    // Wire collab emitter → poll ring buffer so clients receive Yjs updates.\n    // Security: when resourceType is configured, resolve the resource's\n    // owner/org so getChangesSinceForUser can scope delivery. We use\n    // resolveAccess to obtain the resource row — it already handles ownership,\n    // visibility, and share rows. In addition to the owner/org tags we also\n    // tag the event with `resourceType` + `resourceId` so the per-user\n    // delivery filter (canSeeChangeForUser) can evaluate resource access\n    // directly for non-owner sharees:\n    //   • tag the event with the resource owner's email and org (owner-scoped)\n    //     for backward compatibility with the conservative owner/org fast path.\n    //   • ALSO tag with resourceType/resourceId so canSeeChangeForUser can run\n    //     an access-aware (cached) check and push to explicit viewer+ sharees\n    //     who don't match owner/org — instead of only degrading them to the\n    //     poll fallback.\n    // See also: SECURITY comment in poll.ts on canSeeChangeForUser.\n    const collabEmitter = getCollabEmitter();\n    collabEmitter.on(\"collab\", async (event) => {\n      if (!resourceType) {\n        // No access model — broadcast to all authenticated users (no owner/orgId tag).\n        recordChange(event);\n        return;\n      }\n\n      // Resolve the resource to learn its owner/org so we can scope the event.\n      const docId = event.docId as string | undefined;\n      if (!docId) {\n        recordChange(event);\n        return;\n      }\n\n      try {\n        const resourceId = resolveResourceId\n          ? await resolveResourceId(docId)\n          : docId;\n        if (!resourceId) {\n          // Cannot resolve resource — drop the event to avoid leaking to\n          // unauthorized pollers. The client will catch up via state-vector.\n          return;\n        }\n\n        // Load the resource row to get owner/org. resolveAccess fetches the\n        // resource row internally; use getShareableResource to read it cheaply.\n        const { requireShareableResource } =\n          await import(\"../sharing/registry.js\");\n        const reg = requireShareableResource(resourceType);\n        const db = reg.getDb() as any;\n        const { eq } = await import(\"drizzle-orm\");\n        const [resource] = await db\n          .select()\n          .from(reg.resourceTable)\n          .where(eq(reg.resourceTable.id, resourceId))\n          .limit(1);\n\n        if (!resource) {\n          // Resource deleted — drop silently.\n          return;\n        }\n\n        const ownerEmail =\n          typeof resource.ownerEmail === \"string\"\n            ? resource.ownerEmail\n            : undefined;\n        const orgId =\n          typeof resource.orgId === \"string\" ? resource.orgId : undefined;\n\n        // Tag the event with owner/org (backward-compat fast path) AND with\n        // resourceType/resourceId so canSeeChangeForUser can run an\n        // access-aware check for non-owner sharees (see poll.ts).\n        recordChange({\n          ...event,\n          ...(ownerEmail ? { owner: ownerEmail } : {}),\n          ...(orgId ? { orgId } : {}),\n          resourceType,\n          resourceId,\n        });\n      } catch {\n        // If we fail to resolve the resource (DB not ready, etc.) we skip\n        // the event rather than broadcasting it without scoping.\n      }\n    });\n\n    // Mount collab routes — manual method dispatch since the path layout is\n    // `/collab/:docId/<action>`. The framework strips the `/collab` mount\n    // prefix from event.url.pathname before calling us, so we see e.g.\n    // `/abc-123/state`.\n    getH3App(nitroApp).use(\n      `${P}/collab`,\n      defineEventHandler(async (event: H3Event) => {\n        const parts = (event.url?.pathname || \"\")\n          .replace(/^\\/+/, \"\")\n          .split(\"/\");\n        const docId = parts[0] || \"\";\n        const action = parts[1] || \"\";\n        if (!docId) return;\n        if (event.context) {\n          event.context.params = { ...event.context.params, docId };\n        }\n        const method = getMethod(event);\n\n        // Auth check — all collab routes require a session\n        const session = await getSession(event).catch(() => null);\n        if (!session?.email) {\n          setResponseStatus(event, 401);\n          return { error: \"Authentication required\" };\n        }\n\n        const orgCtx = await getOrgContext(event).catch(() => null);\n        const userEmail = session.email;\n        const orgId = orgCtx?.orgId ?? undefined;\n\n        return runWithRequestContext({ userEmail, orgId }, async () => {\n          // Access check — require at least viewer for reads, editor for writes.\n          // Awareness routes (POST awareness / GET users) require the same\n          // level as other reads so that knowledge of who is editing a doc\n          // doesn't leak to users without access.\n          if (resourceType) {\n            const resourceId = resolveResourceId\n              ? await resolveResourceId(docId)\n              : docId;\n            if (!resourceId) {\n              setResponseStatus(event, 404);\n              return { error: \"Not found\" };\n            }\n            const isWrite =\n              (action === \"update\" && method === \"POST\") ||\n              (action === \"text\" && method === \"POST\") ||\n              (action === \"search-replace\" && method === \"POST\") ||\n              (action === \"json\" && method === \"POST\") ||\n              (action === \"patch\" && method === \"POST\");\n\n            if (isWrite) {\n              // assertAccess throws ForbiddenError (→ 403) if no editor access\n              const access = await assertAccess(\n                resourceType,\n                resourceId,\n                \"editor\",\n              );\n              const resource = access.resource as Record<string, unknown>;\n              const awarenessScope: CollabAwarenessScope = {\n                resourceType,\n                resourceId,\n                ...(typeof resource.ownerEmail === \"string\"\n                  ? { owner: resource.ownerEmail }\n                  : {}),\n                ...(typeof resource.orgId === \"string\"\n                  ? { orgId: resource.orgId }\n                  : {}),\n              };\n              if (event.context) {\n                event.context._collabAwarenessScope = awarenessScope;\n              }\n            } else {\n              // resolveAccess returns null when no access; return 404 to avoid leaking existence\n              const access = await resolveAccess(resourceType, resourceId);\n              if (!access) {\n                setResponseStatus(event, 404);\n                return { error: \"Not found\" };\n              }\n              const resource = access.resource as Record<string, unknown>;\n              const awarenessScope: CollabAwarenessScope = {\n                resourceType,\n                resourceId,\n                ...(typeof resource.ownerEmail === \"string\"\n                  ? { owner: resource.ownerEmail }\n                  : {}),\n                ...(typeof resource.orgId === \"string\"\n                  ? { orgId: resource.orgId }\n                  : {}),\n              };\n              if (event.context) {\n                event.context._collabAwarenessScope = awarenessScope;\n              }\n            }\n          }\n\n          // Payload size limit for write operations\n          const isWriteAction =\n            (action === \"update\" && method === \"POST\") ||\n            (action === \"text\" && method === \"POST\") ||\n            (action === \"search-replace\" && method === \"POST\") ||\n            (action === \"json\" && method === \"POST\") ||\n            (action === \"patch\" && method === \"POST\");\n\n          if (isWriteAction) {\n            const contentLength = Number(\n              event.headers?.get?.(\"content-length\") ?? NaN,\n            );\n            if (!isNaN(contentLength) && contentLength > maxPayloadBytes) {\n              setResponseStatus(event, 413);\n              return {\n                error: `Payload too large. Maximum is ${maxPayloadBytes} bytes.`,\n              };\n            }\n            // Store limit in context so route handlers can enforce it on the\n            // parsed body when content-length is absent or spoofed.\n            if (event.context) {\n              event.context._collabMaxPayloadBytes = maxPayloadBytes;\n            }\n          }\n\n          if (action === \"state\" && method === \"GET\")\n            return getCollabState(event);\n          if (action === \"update\" && method === \"POST\")\n            return postCollabUpdate(event);\n          if (action === \"text\" && method === \"POST\")\n            return postCollabText(event);\n          if (action === \"search-replace\" && method === \"POST\")\n            return postCollabSearchReplace(event);\n          if (action === \"json\" && method === \"POST\")\n            return postCollabJson(event);\n          if (action === \"json\" && method === \"GET\")\n            return getCollabJson(event);\n          if (action === \"patch\" && method === \"POST\")\n            return postCollabPatch(event);\n          if (action === \"awareness\" && method === \"POST\")\n            return postAwareness(event);\n          if (action === \"users\" && method === \"GET\")\n            return getActiveUsers(event);\n          setResponseStatus(event, 404);\n          return { error: \"Not found\" };\n        });\n      }),\n    );\n\n    // Auto-seed existing documents into collab state\n    if (autoSeed) {\n      const isJson = options.contentType === \"json\";\n      const seedColumn = isJson\n        ? options.jsonColumn || contentColumn\n        : contentColumn;\n\n      // Run in background so it doesn't block startup\n      setTimeout(async () => {\n        try {\n          const client = getDbExec();\n          const { rows } = await client.execute(\n            `SELECT ${idColumn}, ${seedColumn} FROM ${table}`,\n          );\n          for (const row of rows) {\n            const docId = row[idColumn] as string;\n            const exists = await hasCollabState(docId);\n            if (exists) continue;\n\n            if (isJson) {\n              const raw = (row[seedColumn] as string) ?? \"{}\";\n              try {\n                const parsed = JSON.parse(raw);\n                const inferredType: \"map\" | \"array\" = Array.isArray(parsed)\n                  ? \"array\"\n                  : \"map\";\n                await seedFromJson(docId, parsed, \"data\", inferredType);\n              } catch {\n                // Invalid JSON — skip\n              }\n            } else {\n              const content = (row[seedColumn] as string) ?? \"\";\n              await seedFromText(docId, content);\n            }\n          }\n        } catch {\n          // Table may not exist yet on first boot — that's fine\n        }\n      }, 1000);\n    }\n  };\n}\n"]}

package/dist/server/core-routes-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core-routes-plugin.d.ts","sourceRoot":"","sources":["../../src/server/core-routes-plugin.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAqClC,OAAO,EAIL,KAAK,0BAA0B,EAChC,MAAM,8BAA8B,CAAC;AAkDtC,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EA+BL,KAAK,4BAA4B,EACjC,KAAK,uBAAuB,EAE7B,MAAM,sBAAsB,CAAC;AAM9B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAoCvD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AACvD,eAAO,MAAM,sBAAsB,0BAAqC,CAAC;AACzE,eAAO,MAAM,6BAA6B,+BAA0C,CAAC;AAErF,wBAAgB,+BAA+B,CAC7C,KAAK,EACD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAC1E,SAAS,EACb,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,MAAM,CAGR;AAED,wBAAgB,mBAAmB,IAAI,YAAY,EAAE,CA+BpD;AAED,wEAAwE;AACxE,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,EAAE,EAAE,IAAI,CAAC;IACT,6EAA6E;IAC7E,KAAK,EAAE,OAAO,CAAC;IACf,gFAAgF;IAChF,EAAE,EAAE,OAAO,CAAC;IACZ,oDAAoD;IACpD,EAAE,EAAE,MAAM,CAAC;IACX,0EAA0E;IAC1E,QAAQ,EAAE;QACR,UAAU,EAAE,OAAO,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,mBAAmB,EAAE,OAAO,CAAC;QAC7B,4BAA4B,EAAE,OAAO,CAAC;KACvC,CAAC;IACF,yDAAyD;IACzD,MAAM,CAAC,EAAE,0BAA0B,CAAC;CACrC;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,GAAE,MAAM;IAAE,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAAc,EACtE,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAiC9B;AAoBD,UAAU,yBAAyB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAQrE;AAED,eAAO,MAAM,6BAA6B,YACxC,iBAAiB,EACjB,4BAA4B,CACpB,CAAC;AAEX,wBAAgB,8BAA8B,CAAC,CAAC,EAC9C,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,IAAI,EACzC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,CAAC,GACT,IAAI,CAIN;AAgCD,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,SAAS,EAAE,OAAO,GACjB,MAAM,GAAG,IAAI,CAOf;AAoCD,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EACb,GAAG,SAAa,GACf;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAoCzD;AAED,wBAAgB,qCAAqC,SAEpD;AAmBD,wBAAgB,0CAA0C,CACxD,KAAK,EAAE,OAAO,GACb,yBAAyB,GAAG,IAAI,CAsBlC;AAED,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,mBAAmB;;;;;;;;;;;;;;;;;;EA8B1B;AAgDD,eAAO,MAAM,kBAAkB,QAAwC,CAAC;AAExE,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,MAAM,CAoBR;AAwHD,KAAK,6BAA6B,GAAG,CACnC,KAAK,EAAE,OAAO,KACX,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAE5C,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,wBAAsB,oCAAoC,CACxD,KAAK,EAAE,OAAO,EACd,OAAO,GAAE;IACP,cAAc,CAAC,EAAE,6BAA6B,CAAC;IAC/C,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;CACjE,EACN,IAAI,CAAC,EAAE,SAAS,GAAG,UAAU,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CAsD9B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,MAAM,GAAG,IAAI,CASf;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,GAAG,CAc/D;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,4BAA4B,CAAC;CACzC;AAED,MAAM,WAAW,+BAA+B;IAC9C,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACrE,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,gBAAgB,EAAE,CAChB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,uBAAuB,EACpC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KACjD,OAAO,CAAC,OAAO,CAAC,CAAC;CACvB;AAgCD;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,EACD,YAAY,EAAE,+BAA+B,GAC5C,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA4DtE;AAED,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,MAAM,CAAC,CAGjB;AAUD,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9D,MAAM,WAAW,uBAAuB;IACtC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,oDAAoD;IACpD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,oEAAoE;IACpE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,2DAA2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,uDAAuD;IACvD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,sEAAsE;IACtE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oDAAoD;IACpD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;wCACoC;IACpC,eAAe,CAAC,EAAE,OAAO,iBAAiB,EAAE,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;IAChF;2DACuD;IACvD,wBAAwB,CAAC,EAAE,OAAO,iBAAiB,EAAE,gBAAgB,CAAC,0BAA0B,CAAC,CAAC;IAClG,qEAAqE;IACrE,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB;;;;OAIG;IACH,cAAc,CAAC,EAAE,6BAA6B,CAAC;CAChD;AAED,UAAU,2BAA2B;IACnC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAChD,mBAAmB,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC7C;AAED,KAAK,sBAAsB,GAAG,CAC5B,GAAG,EAAE,MAAM,KACR,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AAE7C,wBAAsB,+BAA+B,CACnD,WAAW,GAAE,sBAAmC,GAC/C,OAAO,CAAC,2BAA2B,CAAC,CAgBtC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,GAAE,uBAA4B,GACpC,cAAc,CA46FhB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,EAAE,cAAyC,CAAC"}
+{"version":3,"file":"core-routes-plugin.d.ts","sourceRoot":"","sources":["../../src/server/core-routes-plugin.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAqClC,OAAO,EAIL,KAAK,0BAA0B,EAChC,MAAM,8BAA8B,CAAC;AAkDtC,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EA+BL,KAAK,4BAA4B,EACjC,KAAK,uBAAuB,EAE7B,MAAM,sBAAsB,CAAC;AAM9B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAqCvD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AACvD,eAAO,MAAM,sBAAsB,0BAAqC,CAAC;AACzE,eAAO,MAAM,6BAA6B,+BAA0C,CAAC;AAErF,wBAAgB,+BAA+B,CAC7C,KAAK,EACD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAC1E,SAAS,EACb,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,MAAM,CAGR;AAED,wBAAgB,mBAAmB,IAAI,YAAY,EAAE,CA+BpD;AAED,wEAAwE;AACxE,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,EAAE,EAAE,IAAI,CAAC;IACT,6EAA6E;IAC7E,KAAK,EAAE,OAAO,CAAC;IACf,gFAAgF;IAChF,EAAE,EAAE,OAAO,CAAC;IACZ,oDAAoD;IACpD,EAAE,EAAE,MAAM,CAAC;IACX,0EAA0E;IAC1E,QAAQ,EAAE;QACR,UAAU,EAAE,OAAO,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,mBAAmB,EAAE,OAAO,CAAC;QAC7B,4BAA4B,EAAE,OAAO,CAAC;KACvC,CAAC;IACF,yDAAyD;IACzD,MAAM,CAAC,EAAE,0BAA0B,CAAC;CACrC;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,GAAE,MAAM;IAAE,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAAc,EACtE,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAiC9B;AAoBD,UAAU,yBAAyB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAQrE;AAED,eAAO,MAAM,6BAA6B,YACxC,iBAAiB,EACjB,4BAA4B,CACpB,CAAC;AAEX,wBAAgB,8BAA8B,CAAC,CAAC,EAC9C,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,IAAI,EACzC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,CAAC,GACT,IAAI,CAIN;AAgCD,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEtE;AAED,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,SAAS,EAAE,OAAO,GACjB,MAAM,GAAG,IAAI,CAOf;AAoCD,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EACb,GAAG,SAAa,GACf;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAoCzD;AAED,wBAAgB,qCAAqC,SAEpD;AAmBD,wBAAgB,0CAA0C,CACxD,KAAK,EAAE,OAAO,GACb,yBAAyB,GAAG,IAAI,CAsBlC;AAED,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,mBAAmB;;;;;;;;;;;;;;;;;;EA8B1B;AAgDD,eAAO,MAAM,kBAAkB,QAAwC,CAAC;AAExE,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,WAAW,SAAK,GACf,MAAM,CAoBR;AAwHD,KAAK,6BAA6B,GAAG,CACnC,KAAK,EAAE,OAAO,KACX,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAE5C,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,wBAAsB,oCAAoC,CACxD,KAAK,EAAE,OAAO,EACd,OAAO,GAAE;IACP,cAAc,CAAC,EAAE,6BAA6B,CAAC;IAC/C,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;CACjE,EACN,IAAI,CAAC,EAAE,SAAS,GAAG,UAAU,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CAsD9B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,MAAM,GAAG,IAAI,CASf;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,GAAG,CAc/D;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,4BAA4B,CAAC;CACzC;AAED,MAAM,WAAW,+BAA+B;IAC9C,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACrE,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,gBAAgB,EAAE,CAChB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,uBAAuB,EACpC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KACjD,OAAO,CAAC,OAAO,CAAC,CAAC;CACvB;AAgCD;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,EACD,YAAY,EAAE,+BAA+B,GAC5C,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA4DtE;AAED,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,MAAM,CAAC,CAGjB;AAUD,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9D,MAAM,WAAW,uBAAuB;IACtC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,oDAAoD;IACpD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,oEAAoE;IACpE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,2DAA2D;IAC3D,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,uDAAuD;IACvD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,sEAAsE;IACtE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oDAAoD;IACpD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;wCACoC;IACpC,eAAe,CAAC,EAAE,OAAO,iBAAiB,EAAE,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;IAChF;2DACuD;IACvD,wBAAwB,CAAC,EAAE,OAAO,iBAAiB,EAAE,gBAAgB,CAAC,0BAA0B,CAAC,CAAC;IAClG,qEAAqE;IACrE,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB;;;;OAIG;IACH,cAAc,CAAC,EAAE,6BAA6B,CAAC;CAChD;AAED,UAAU,2BAA2B;IACnC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAChD,mBAAmB,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC7C;AAED,KAAK,sBAAsB,GAAG,CAC5B,GAAG,EAAE,MAAM,KACR,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AAE7C,wBAAsB,+BAA+B,CACnD,WAAW,GAAE,sBAAmC,GAC/C,OAAO,CAAC,2BAA2B,CAAC,CAgBtC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,GAAE,uBAA4B,GACpC,cAAc,CAk7FhB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,EAAE,cAAyC,CAAC"}

package/dist/server/core-routes-plugin.js

@@ -49,6 +49,7 @@ import { handleIdentitySso } from "./identity-sso.js";
 import { createOpenRouteHandler } from "./open-route.js";
 import { createPollEventsHandler } from "./poll-events.js";
 import { createPollHandler } from "./poll.js";
+import { createRealtimeTokenHandler } from "./realtime-token.js";
 import { runWithRequestContext } from "./request-context.js";
 import { findUnsupportedScopedKeyNames, saveKeyValuesToScopedSecrets, ScopedKeyStorageError, } from "./scoped-key-storage.js";
 import { createTranscribeVoiceHandler } from "./transcribe-voice.js";
@@ -901,6 +902,8 @@ export function createCoreRoutesPlugin(options = {}) {
             }));
             // Polling
             getH3App(nitroApp).use(`${P}/poll`, createPollHandler());
+            // Realtime subscribe-token mint (hosted gateway path)
+            getH3App(nitroApp).use(`${P}/realtime-token`, createRealtimeTokenHandler());
             // SSE
             if (!options.disableSSE) {
                 for (const route of resolveFrameworkSseRoutes(options.sseRoute)) {